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IN THE CLAIMS 

L (Currently Amended) A method of detecting unauthorized actions with respect to 
content on an optical a media disk, the «)edia optical disk including a fffst read-only 
portion for pre-recorded content and a second writeable portion for written content, the 
method comprising: 

reading an identifier on the m e di a optical disk; 

determining whether the identifier was located in the fesi read-only or the 
writeable &eemd portion of the media disk; 

determining whether die identifier identifies itself as a pre-recorded identifier or 
as a written identifier; 

and if the identifier identifies itself as a pre-recorded identifier and is located in 
the «e^nd writeable portion of the media disk, detecting an unauthorized action. 

2. (Currently Amended) The method of claim 1 wherein the reading of the identifier 
on the optical modla disk is during a optical media disk access operation including one or 
more of record, play, get play key, copy, open, close and create. 
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3 . (Currentl y Amended) The method of claim 2 wherein ftmctionality for the optical 
m e dia disk access 4isk operation is revoked after detecting the unauthorized action. 



4. (Cancelled) 



5. (Cancelled) 
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6. (Cancelled) 

7. (Cancelled) 

8. (Cancelled) 

9. (Currently Amended) The method of claim 1 wherein the identifier is a seed for a 
key generator, the key generator retrieving one or more keys from a key box, the keys for 
one or more of unlocking and decrypting files on a media the optical disk. 

10. (Cancelled) 

11. (Cancelled) 

12. (Cancelled) 

13. (Cancelled) 

14. (Cancelled) 
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15. (Currently Amended) An apparatus for detecting unauthorized actions with 
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respect to encrypted data on a media disk, the media disk including a read-only (ks^ 
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portion for preyiecorded content and a seeeftd writeable portion for written content, the 
apparatus comprising: 

means for reading an identifier on the media disk; 

means for determining whether the identifier was located in the fifst read-only 
portion or in die se cond writeable portion of the disk; 

means for determining whether the identifier identifies itself as a pre-recorded 
identifier or as a written identifier; 

and means for detecting an unauthori2ed action if the identifier identifies itself as 
a pre-recorded identifier and is located in the s econd writeable portion of the media disk. 



16. (Cancelled) 

17. (Original) The apparatus of claim 15 wherein the means for reading of the 
identifier includes a media disk access component 

18. (Original) The appaiatus of claim 15 wherein the means for reading the identifier 
operates during an access operation. 

19. (Cancelled) 

20. (Cancelled) 
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2 1 . (Currently Amended) The apparatus of claim 1 5 wherein the identifier is a seed 
for a cryptographic key box, the key box using the identifier to retrieve one or more keys 
for unlocking files on ^ the media disk. 

22. (Currently Amended) An engine configured to detect unauthorized actions with 
respect to encrypted data on a media disk, the media disk including a read-only fifst 
portion for pre-recorded content and a &ee^td writeable portion for written content, the 
engine comprising: 

a firmware component located on an application specific integrated circuit 
(ASIC)* the firmware component including: 

a block configured to read an identifier on the media disk; 

a block configured to determine whether the identifier was located in the 
read-only portion or the se cond writeable portion of the media disk; 

a block configured to determine whether the identifier identified itself as a pre- 
recorded identifier or as a written identifier; and 

a block configured to detect an unauthori2ed action if the identifier was located in 
the second portion and identified itself as a pre-recorded identifier. 

23. (Cancelled) 
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